Description
Netis E1+ 1.2.32533 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve WiFi passwords through the netcore_get.cgi endpoint. Attackers can send a GET request to the endpoint to extract sensitive network credentials including SSID and WiFi passwords in plain text.
Problem types
Insertion of Sensitive Information Into Sent Data
Product status
Credits
Besim ALTINOK
References
www.exploit-db.com/exploits/48384 (ExploitDB-48384)
www.netis-systems.com (Netis Systems Official Homepage)
www.vulncheck.com/...is-e-unauthenticated-wifi-password-leak (VulnCheck Advisory: Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak)